dsh-markdown-typora 0.3.5 → 0.3.11

package/host/native-worker-lease.js

@@ -0,0 +1,127 @@
+'use strict';
+// Copies one verified helper per generation. No shared cache or DACL changes.
+// 冷路径单助手：一次 PowerShell 进程完成两段资格验证，顺序与原版一致——
+// Q1 base → Node 独占 mkdtemp + 重解析核验 → Q2 从头复查 base+lease → END →
+// 身份/重解析核验 → 之后才读取、独占创建并校验辅助程序副本。规则、realpath、
+// mkdtemp、hash/长度/硬链接/权限/清理与失败即拒全部保留。行协议帧经有界队列
+// 按序消费（早到/合并/post-close 缓冲均合法），END 后验证无多余帧与退出码；
+// 任何失败、超时或 EOF（父进程退出）都有界地终止助手，不留驻 shell。
+const fs=require('node:fs/promises'),path=require('node:path'),crypto=require('node:crypto');
+const {spawn}=require('node:child_process');
+const digest=b=>crypto.createHash('sha256').update(b).digest('hex');
+const STEP_TIMEOUT=10000, OUT_BUDGET=262144, FRAME_LIMIT=64, ERR_BUDGET=8192, EXIT_TIMEOUT=5000;
+const workerPathError=cause=>Object.assign(Error('找不到通过权限检查的辅助程序执行目录'),{code:'MP_NATIVE_WORKER_PATH',cause});
+
+function parseReport(line,tag){
+  if(typeof line!=='string'||!line.startsWith(tag+' '))throw workerPathError(Error('资格验证助手输出帧无效'));
+  let report;
+  try{report=JSON.parse(line.slice(tag.length+1));}catch(error){throw workerPathError(error);}
+  if(typeof report.base!=='string'||!report.sid||!Array.isArray(report.checks)||!report.checks.length)throw workerPathError(Error('Invalid worker path qualification'));
+  return report;
+}
+
+async function startHandshake() {
+  const script=await fs.readFile(path.join(__dirname,'native-worker-path.ps1'),'utf8');
+  const powershell=path.join(process.env.SystemRoot||'C:/Windows','System32/WindowsPowerShell/v1.0/powershell.exe');
+  const child=spawn(powershell,['-NoProfile','-NonInteractive','-EncodedCommand',Buffer.from(script,'utf16le').toString('base64')],
+    {windowsHide:true,stdio:['pipe','pipe','pipe'],env:{...process.env,MP_NATIVE_LEASE_HANDSHAKE:'1',MP_NATIVE_LEASE_PATH:''}});
+  const frames=[];let framesBytes=0,buffer='',stderrText='',waiter=null,failed=null,closed=false;
+  const wake=()=>{const w=waiter;waiter=null;if(w)w.resolve();};
+  const fail=error=>{if(failed)return;failed=error;try{child.kill();}catch{/* 已退 */}wake();};
+  child.stdout.setEncoding('utf8');
+  child.stdout.on('data',chunk=>{
+    if(failed)return;
+    buffer+=chunk;
+    let end;
+    while((end=buffer.indexOf('\n'))>=0){
+      const line=buffer.slice(0,end).replace(/\r$/,'');buffer=buffer.slice(end+1);
+      frames.push(line);framesBytes+=line.length;
+    }
+    if(frames.length>FRAME_LIMIT||framesBytes>OUT_BUDGET||buffer.length>OUT_BUDGET)return fail(Error('资格验证助手输出超界'));
+    wake();
+  });
+  child.stderr.setEncoding('utf8');
+  child.stderr.on('data',chunk=>{stderrText+=chunk;if(stderrText.length>ERR_BUDGET)fail(Error('资格验证助手错误输出超界'));});
+  child.on('error',fail);
+  child.on('close',()=>{closed=true;wake();});
+  async function step(promise,label){
+    let timer=null;
+    try{
+      return await Promise.race([promise,new Promise((_,reject)=>{
+        timer=setTimeout(()=>{const error=Error('资格验证助手'+label+'超时');fail(error);reject(workerPathError(error));},STEP_TIMEOUT);
+        if(timer.unref)timer.unref();
+      })]);
+    } finally { if(timer)clearTimeout(timer); }
+  }
+  // 有界帧队列：合法帧先缓存后按序消费；child 关闭后仍可消费已完整缓冲的帧。
+  async function readLine(){
+    for(;;){
+      if(frames.length)return frames.shift();
+      if(failed)throw workerPathError(failed);
+      if(closed)throw workerPathError(Error('资格验证助手提前退出'));
+      await step(new Promise(resolve=>{waiter={resolve};}),'等待输出');
+    }
+  }
+  const write=frame=>new Promise((resolve,reject)=>{
+    if(failed||closed)return reject(workerPathError(failed||Error('资格验证助手提前退出')));
+    child.stdin.write(frame,'utf8',error=>error?reject(workerPathError(error)):resolve());
+  });
+  const finish=async()=>{ // END 已收：无多余帧、干净退出（有界）
+    if(frames.length)throw workerPathError(Error('资格验证助手输出多余帧'));
+    if(!closed)await step(new Promise(resolve=>{if(closed)return resolve();child.once('close',resolve);}),'退出');
+    if(child.exitCode!==0)throw workerPathError(Error('资格验证助手退出码异常：'+child.exitCode));
+  };
+  const kill=async()=>{ // 有界终止：EOF + kill + 有限等待 + 兜底 SIGKILL
+    try{child.stdin.end();}catch{/* 已断 */}
+    if(child.exitCode===null&&child.signalCode===null){try{child.kill();}catch{/* 已退 */}}
+    await step(new Promise(resolve=>{if(child.exitCode!==null||child.signalCode!==null)return resolve();child.once('close',resolve);}),'终止');
+    if(child.exitCode===null&&child.signalCode===null){try{child.kill('SIGKILL');}catch{/* 已退 */}}
+  };
+  return {child,readLine,write,finish,kill};
+}
+
+async function createNativeWorkerLease({name='file-worker.exe'}={}) {
+  if(!['file-worker.exe','pdf-worker-guard.exe'].includes(name))throw Error('Unknown native worker');
+  const handshake=await startHandshake();
+  let dir=null,createdFile=false;
+  async function cleanup() {
+    const stat=await fs.lstat(dir).catch(e=>{if(e.code!=='ENOENT')throw e;return null;});
+    if(!stat)return;
+    if(!stat.isDirectory()||stat.isSymbolicLink()||path.resolve(await fs.realpath(dir)).toLowerCase()!==path.resolve(dir).toLowerCase())throw Error('Worker lease changed before cleanup');
+    if(createdFile)await fs.unlink(path.join(dir,name)).catch(e=>{if(e.code!=='ENOENT')throw e;});
+    await fs.rmdir(dir); // Never recursively remove unknown entries.
+  }
+  try {
+    const first=parseReport(await handshake.readLine(),'Q1');
+    const base=await fs.realpath(first.base);
+    if(path.resolve(base).toLowerCase()!==path.resolve(first.base).toLowerCase())throw Error('Worker base changed during qualification');
+    const prefix=path.join(base,'MarkPilot-file-'+process.pid+'-');
+    if((prefix+'xxxxxx/'+name).length>240)throw Error('No short worker execution path');
+    dir=await fs.mkdtemp(prefix);
+    const file=path.join(dir,name);
+    // 原精确顺序：先完成第二段资格与身份/重解析核验，之后才写入辅助程序。
+    if((await fs.lstat(dir)).isSymbolicLink()||path.resolve(await fs.realpath(dir)).toLowerCase()!==path.resolve(dir).toLowerCase())throw Error('Worker lease redirected');
+    await handshake.write('LEASE\t'+Buffer.from(dir,'utf16le').toString('base64')+'\n');
+    const second=parseReport(await handshake.readLine(),'Q2');
+    if((await handshake.readLine())!=='END')throw Error('Worker handshake footer missing');
+    if(path.resolve(second.base).toLowerCase()!==path.resolve(first.base).toLowerCase()
+      ||path.resolve(second.lease).toLowerCase()!==path.resolve(dir).toLowerCase()
+      ||second.sid!==first.sid)throw Error('Worker lease identity changed');
+    if((await fs.lstat(dir)).isSymbolicLink()||path.resolve(await fs.realpath(dir)).toLowerCase()!==path.resolve(dir).toLowerCase())throw Error('Worker lease redirected');
+    await handshake.finish();
+    const source=path.join(__dirname,'native',name).replace(/([\\/])app\.asar([\\/])/,'$1app.asar.unpacked$2');
+    const [data,stampText]=await Promise.all([fs.readFile(source),fs.readFile(path.join(__dirname,'native',name+'.build.json'),'utf8')]);
+    const stamp=JSON.parse(stampText);
+    if(!Number.isSafeInteger(stamp.bytes)||stamp.bytes<=0||!/^[a-f0-9]{64}$/.test(stamp.sha256)||data.length!==stamp.bytes||digest(data)!==stamp.sha256)throw Object.assign(Error('文件安全写入辅助程序校验失败'),{code:'MP_FILE_WORKER_INTEGRITY'});
+    const handle=await fs.open(file,'wx',0o600);createdFile=true;
+    try {await handle.writeFile(data);await handle.sync();} finally {await handle.close();}
+    const stat=await fs.lstat(file),copy=await fs.readFile(file);
+    if(!stat.isFile()||stat.isSymbolicLink()||stat.nlink!==1||copy.length!==stamp.bytes||digest(copy)!==stamp.sha256)throw Object.assign(Error('文件安全写入辅助副本校验失败'),{code:'MP_FILE_WORKER_INTEGRITY'});
+    return {directory:dir,executable:file,sha256:stamp.sha256,qualification:second,cleanup};
+  } catch(error) {
+    await handshake.kill().catch(()=>{});
+    if(dir){try{await cleanup();}catch(cleanupError){error.workerLeaseCleanupError=String(cleanupError);error.workerLease=dir;}}
+    throw error;
+  }
+}
+module.exports={createNativeWorkerLease};

package/host/native-worker-path.ps1

@@ -0,0 +1,63 @@
+$ErrorActionPreference='Stop'
+[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false)
+$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+$trusted=@($sid,'S-1-5-18','S-1-5-32-544','S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464')
+$checks=[Collections.Generic.List[object]]::new()
+function Assert-WorkerRules($rules,[bool]$private){
+ foreach($r in $rules){
+  if($r.AccessControlType-ne[Security.AccessControl.AccessControlType]::Allow-or$r.IdentityReference.Value-in$trusted){continue}
+  $inheritOnly=($r.PropagationFlags-band[Security.AccessControl.PropagationFlags]::InheritOnly)-ne0
+  if($r.IdentityReference.Value-eq'S-1-3-0'-and$inheritOnly){continue}
+  $mask=[long]$r.FileSystemRights
+  if(((-not$inheritOnly)-and($mask-band 0x500D0040)-ne0)-or($private-and($mask-band 0x500D0156)-ne0)){throw 'Worker directory permits modification by another identity'}
+ }
+}
+function Inspect-Directory([string]$p,[bool]$private){
+ $d=[IO.DirectoryInfo]::new($p)
+ if(-not$d.Exists-or($d.Attributes-band[IO.FileAttributes]::ReparsePoint)-ne0){throw 'Worker path must contain real directories'}
+ $a=$d.GetAccessControl([Security.AccessControl.AccessControlSections]'Owner,Access')
+ $owner=$a.GetOwner([Security.Principal.SecurityIdentifier]).Value
+ if($owner-notin$trusted){throw 'Worker path has an untrusted owner'}
+ Assert-WorkerRules ($a.GetAccessRules($true,$true,[Security.Principal.SecurityIdentifier])) $private
+ $checks.Add(@{path=$d.FullName;owner=$owner;sddl=$a.GetSecurityDescriptorSddlForm([Security.AccessControl.AccessControlSections]'Owner,Access')})
+}
+function Get-Qualification([string]$leaseArg){
+ $lease=$leaseArg
+ if($lease){$lease=[IO.Path]::GetFullPath($lease).TrimEnd('\')}
+ $candidates=@([Environment]::GetFolderPath([Environment+SpecialFolder]::LocalApplicationData),[IO.Path]::Combine($env:USERPROFILE,'AppData','Local'),$env:USERPROFILE)|Select-Object -Unique
+ $base=$null;$rejections=[Collections.Generic.List[string]]::new()
+ foreach($candidate in $candidates){
+  try{
+   $candidate=[IO.Path]::GetFullPath($candidate).TrimEnd('\')
+   if($candidate-notmatch'^[A-Za-z]:\\'-or$candidate.Length-gt180){throw 'No short local worker base'}
+   if($lease-and-not[IO.Path]::GetDirectoryName($lease).Equals($candidate,[StringComparison]::OrdinalIgnoreCase)){continue}
+   $checks.Clear();$p=$candidate
+   while($p){Inspect-Directory $p ($p-eq$candidate);$parent=[IO.Directory]::GetParent($p);$p=if($parent){$parent.FullName}else{$null}}
+   $base=$candidate;break
+  }catch{$rejections.Add($_.Exception.Message)}
+ }
+ if(-not$base){throw ('No qualified private worker directory: '+($rejections-join'; '))}
+ if($lease){
+  if(-not[IO.Path]::GetDirectoryName($lease).Equals($base,[StringComparison]::OrdinalIgnoreCase)-or[IO.Path]::GetFileName($lease)-notmatch'^MarkPilot-file-[0-9]+-[A-Za-z0-9]{6}$'){throw 'Worker lease must be a new direct child'}
+  Inspect-Directory $lease $true
+  if(($lease.Length+16)-gt240){throw 'Worker executable path budget exceeded'}
+ }
+ [pscustomobject]@{base=$base;lease=$lease;sid=$sid;checks=@($checks);rejectedCandidates=@($rejections)}
+}
+if($env:MP_NATIVE_LEASE_HANDSHAKE-eq'1'){
+ # 单助手两段资格验证：先输出 base 资格 JSON 一行；再读 Node 发来的租约路径
+ # （LEASE<TAB>base64(UTF-16LE)），按原规则从头复查 base 与 lease 后输出第二份
+ # JSON 并明确退出。stdin EOF（父进程退出/关闭）同样立即退出，不留驻 shell。
+ $first=Get-Qualification ''
+ [Console]::Out.WriteLine('Q1 '+($first|ConvertTo-Json -Depth 5 -Compress))
+ $frame=[Console]::In.ReadLine()
+ if($null-ne $frame-and $frame-match'^LEASE\t([A-Za-z0-9+/=]+)$'){
+  $leasePath=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String($Matches[1]))
+  $second=Get-Qualification $leasePath
+  [Console]::Out.WriteLine('Q2 '+($second|ConvertTo-Json -Depth 5 -Compress))
+ }
+ [Console]::Out.WriteLine('END')
+ exit 0
+}
+# 经典模式（原有行为）：MP_NATIVE_LEASE_PATH 环境变量，单次输出 JSON。
+(Get-Qualification $env:MP_NATIVE_LEASE_PATH)|ConvertTo-Json -Depth 5 -Compress

package/host/package.json

@@ -0,0 +1 @@
+{"type":"commonjs"}

package/host/safe-file.js

@@ -0,0 +1,137 @@
+'use strict';
+const fs=require('node:fs/promises'),path=require('node:path'),crypto=require('node:crypto'),{spawn}=require('node:child_process');
+const {createNativeWorkerLease}=require('./native-worker-lease');
+let worker=null,starting=null,serial=0,closing=false,shutdown=null,operations=0;
+const idleWaiters=new Set();
+let operationHold=null;
+async function startWorker() {
+  if(worker?.failed)await worker.exited;
+  const lease=await createNativeWorkerLease();
+  let child;
+  try {child=spawn(lease.executable,[],{cwd:lease.directory,windowsHide:true,stdio:['pipe','pipe','pipe']});}
+  catch(error){await lease.cleanup().catch(cleanupError=>{error.workerLeaseCleanupError=String(cleanupError);});throw error;}
+  let buffer='',failure=null,current=null,tail=Promise.resolve(),exitResolve,hasExited=false,expectedEOF=false;
+  const exited=new Promise(resolve=>{exitResolve=resolve;});
+  const unref=()=>{child.unref();for(const stream of [child.stdin,child.stdout,child.stderr])stream.unref?.();};
+  unref();
+  const fail=error=>{
+    if(failure)return;
+    failure=error;error.preserveTemp=true;
+    if(current){clearTimeout(current.timer);current.reject(error);current=null;}
+    child.kill();
+  };
+  const instance={child,exited,lease,get failed(){return !!failure||hasExited;},rpc(command){
+    // Queue deadlines start at dispatch. A failed generation is awaited before replacement.
+    const job=tail.catch(()=>{}).then(()=>new Promise((resolve,reject)=>{
+      if(failure)return reject(failure);
+      if(expectedEOF||hasExited)return reject(Object.assign(Error('文件安全写入进程正在关闭'),{code:'MP_FILE_WORKER_CLOSING',preserveTemp:true}));
+      const request=String(++serial),timer=setTimeout(()=>fail(Object.assign(Error('文件安全写入等待超时，磁盘结果待确认，恢复副本已保留'),{code:'MP_FILE_WORKER_TIMEOUT'})),30000);
+      current={request,resolve,reject,timer};
+      child.stdin.write(JSON.stringify({...command,request})+'\n',error=>{if(error)fail(error);});
+    }));
+    tail=job;return job;
+  },async stop(){
+    await tail.catch(()=>{});
+    if(!hasExited&&!failure){expectedEOF=true;child.stdin.end();}
+    child.ref();for(const stream of [child.stdin,child.stdout,child.stderr])stream.ref?.();
+    let timer;
+    try {await Promise.race([exited,new Promise((_,reject)=>{timer=setTimeout(()=>{child.kill();reject(Error('文件安全写入进程关闭超时，执行目录保留：'+lease.directory));},5000);})]);}
+    finally {clearTimeout(timer);unref();}
+    return {pid:child.pid,lease:lease.directory,cleanupError:instance.cleanupError||null};
+  }};
+  async function finishExit(code) {
+    if(hasExited)return;
+    hasExited=true;
+    if(!(expectedEOF&&code===0&&!current&&!failure))fail(Object.assign(Error('文件安全写入进程已退出：'+code),{code:'MP_FILE_WORKER_EXIT'}));
+    try {await lease.cleanup();}catch(error){instance.cleanupError=String(error);console.error('MarkPilot worker lease cleanup:',lease.directory,String(error));}
+    if(worker===instance)worker=null;
+    exitResolve();
+  }
+  child.on('error',error=>{fail(error);if(!child.pid)void finishExit(null);});
+  child.on('exit',code=>{void finishExit(code);});
+  child.stdin.on('error',fail);child.stderr.on('data',()=>{});
+  child.stdout.setEncoding('utf8');child.stdout.on('data',chunk=>{
+    buffer+=chunk;if(buffer.length>65536){fail(Error('文件安全写入进程回复过长'));return;}
+    let end;
+    while((end=buffer.indexOf('\n'))>=0){const line=buffer.slice(0,end).replace(/^\ufeff/,'');buffer=buffer.slice(end+1);let reply;
+      try{reply=JSON.parse(line);}catch{fail(Error('文件安全写入进程返回无效数据'));return;}
+      if(!current||reply.request!==current.request||typeof reply.result?.ok!=='boolean'){fail(Error('文件安全写入回复不属于当前操作'));return;}
+      const job=current;current=null;clearTimeout(job.timer);job.resolve(reply.result);
+    }
+  });
+  worker=instance;return instance;
+}
+function nativeWorker() {
+  if(starting)return starting;
+  if(worker&&!worker.failed)return Promise.resolve(worker);
+  // Publish the shared admission promise before any asynchronous materialization.
+  starting=Promise.resolve().then(startWorker).finally(()=>{starting=null;});
+  return starting;
+}
+function finishOperation() {if(--operations===0){clearInterval(operationHold);operationHold=null;for(const resolve of idleWaiters)resolve();idleWaiters.clear();}}
+async function prepareFile(...args) {
+  if(process.platform!=='win32')return prepareFileImpl(...args);
+  if(closing)throw Object.assign(Error('文件安全写入服务正在关闭'),{code:'MP_FILE_WORKER_CLOSING'});
+  if(operations++===0)operationHold=setInterval(()=>{},60000);
+  let finished=false;const done=()=>{if(!finished){finished=true;finishOperation();}};
+  try {
+    const stage=await prepareFileImpl(...args);
+    return {
+      async commit(){try{const reply=await stage.commit();done();return reply;}catch(error){if(error.preserveTemp)done();throw error;}},
+      async abort(){try{return await stage.abort();}finally{done();}},
+    };
+  } catch(error){done();throw error;}
+}
+// 具名 handler：显式 shutdown 成功后由 shutdownFileWorker 移除同一 handler，
+// 失败（关闭超时等）保留至进程退出兜底重试；HMR 旧代不再挂匿名监听。
+function beforeExitShutdown(){void shutdownFileWorker().catch(error=>console.error('MarkPilot worker shutdown:',String(error)));}
+process.once('beforeExit',beforeExitShutdown);
+function shutdownFileWorker() {
+  if(shutdown)return shutdown;
+  closing=true;
+  const job=(async()=>{
+    // Accepted transactions (including asynchronous startup) retain commit/abort admission.
+    if(operations)await new Promise(resolve=>idleWaiters.add(resolve));
+    if(starting)await starting.catch(()=>{});
+    const current=worker;
+    return current?current.stop():null;
+  })();
+  shutdown=job.then(result=>{process.removeListener('beforeExit',beforeExitShutdown);return result;});
+  return shutdown;
+}
+// 后台预热与输入重叠；保存仍等待同一已校验工作进程。仅 Windows；关闭开始后 no-op。
+function prepareFileWorker() {
+  if(closing||process.platform!=='win32')return Promise.resolve();
+  return nativeWorker().then(()=>{},()=>{});
+}
+// Standalone Node tests/tools also close the unref'ed helper on a normal exit.
+function nativeFailure(reply,temp,backup) {
+  const error=Object.assign(Error('无法安全替换文件，当前草稿已保留：'+(reply.error||'未知错误')),{code:reply.code||'MP_REPLACE_FAILED',preserveTemp:!!reply.preserveTemp});
+  if(error.preserveTemp)error.recoveryPaths={temp,backup};return error;
+}
+async function prepareFileImpl(target,temp,{baseline,output}={}) {
+  if(process.platform!=='win32') {
+    const before=await fs.stat(target).catch(error=>{if(error.code!=='ENOENT')throw error;return null;});
+    const handle=await fs.open(temp,'wx',before?.mode??0o600);await handle.close();
+    if(before){await fs.chmod(temp,before.mode);if(before.uid!==process.getuid?.()||before.gid!==process.getgid?.())await fs.chown(temp,before.uid,before.gid);}
+    let done=false;
+    return {async commit(){await fs.rename(temp,target);done=true;},async abort(){if(!done)await fs.unlink(temp).catch(e=>{if(e.code!=='ENOENT')throw e;});}};
+  }
+  const id=crypto.randomUUID(),backup=temp+'.backup',native=await nativeWorker();let done=false,recovery=false;
+  const expected={exists:!!baseline,sha256:baseline?.sha256||null};
+  let prepared;
+  try{prepared=await native.rpc({action:'prepare',id,target,temp,backup,expected,output});}
+  catch(error){error.recoveryPaths={temp,backup};throw error;}
+  if(!prepared?.ok)throw nativeFailure(prepared||{},temp,backup);
+  return {
+    async commit(){
+      recovery=true;
+      let reply;try{reply=await native.rpc({action:'commit',id});}catch(error){error.preserveTemp=true;error.recoveryPaths={temp,backup};throw error;}
+      if(!reply?.ok){recovery=reply.preserveTemp!==false;throw nativeFailure(reply||{},temp,backup);}
+      done=true;recovery=false;
+      return {backupRetained:reply.backupRetained?backup:null};
+    },
+    async abort(){if(done||recovery)return;const reply=await native.rpc({action:'abort',id});if(!reply?.ok)throw nativeFailure(reply||{},temp,backup);done=true;},
+  };
+}
+module.exports={prepareFile,shutdownFileWorker,prepareFileWorker};

package/host/text-codec.js

@@ -0,0 +1,67 @@
+'use strict';
+const { TextDecoder } = require('node:util');
+const encodingError = message => Object.assign(new Error(message), { code: 'MP_ENCODING' });
+
+function isBinary(bytes) {
+  const head = bytes.subarray(0, 4096), b = i => head[i];
+  const begins = value => head.length >= value.length && head.subarray(0, value.length).equals(Buffer.from(value, 'binary'));
+  const bmp = begins('BM') && head.length >= 26 && head.readUInt16LE(6) === 0 && head.readUInt16LE(8) === 0
+    && [12, 40, 52, 56, 64, 108, 124].includes(head.readUInt32LE(14));
+  const magic = begins('\x89PNG\r\n\x1a\n')
+    || (b(0) === 0xff && b(1) === 0xd8 && b(2) === 0xff)
+    || begins('GIF87a') || begins('GIF89a') || bmp
+    || /^%PDF-\d\.\d/.test(head.subarray(0, 8).toString('ascii'))
+    || begins('PK\x03\x04') || begins('PK\x05\x06') || begins('PK\x07\x08')
+    || begins('\x7fELF')
+    || (begins('RIFF') && head.length >= 12 && ['WEBP', 'WAVE', 'AVI '].includes(head.subarray(8, 12).toString('ascii')))
+    || (b(0) === 0 && b(1) === 0 && b(2) === 1 && b(3) === 0);
+  let printable = 0;
+  for (const c of head) if (c === 9 || c === 10 || c === 13 || (c >= 32 && c < 127) || c >= 128) printable++;
+  return magic || (head.includes(0) && head.length && printable / head.length < 0.8);
+}
+
+// Open and reload share strict decoding. Never invent replacement characters for bad bytes.
+function decodeDocument(bytes, file = '') {
+  if ((bytes[0] === 0xff && bytes[1] === 0xfe && bytes[2] === 0 && bytes[3] === 0)
+    || (bytes[0] === 0 && bytes[1] === 0 && bytes[2] === 0xfe && bytes[3] === 0xff)) {
+    throw encodingError('暂不支持 UTF-32 文件，请先转换为 UTF-8 或带 BOM 的 UTF-16：' + file);
+  }
+  let encoding = 'utf8', bom = false, body = bytes;
+  if ((bytes[0] === 0xff && bytes[1] === 0xfe) || (bytes[0] === 0xfe && bytes[1] === 0xff)) {
+    encoding = bytes[0] === 0xff ? 'utf16le' : 'utf16be'; bom = true; body = bytes.subarray(2);
+    if (body.length % 2) throw encodingError('UTF-16 文件字节数不完整，已停止打开以保护原文件：' + file);
+  } else {
+    if (isBinary(bytes)) throw Object.assign(new Error('这是一个二进制文件，MarkPilot 只打开文本文件：' + file), { code: 'MP_BINARY' });
+    if (bytes[0] === 0xef && bytes[1] === 0xbb && bytes[2] === 0xbf) { bom = true; body = bytes.subarray(3); }
+  }
+  let text;
+  try {
+    // BOM bytes were removed explicitly; another U+FEFF is real document content.
+    text = new TextDecoder(encoding === 'utf8' ? 'utf-8' : encoding === 'utf16le' ? 'utf-16le' : 'utf-16be', { fatal: true, ignoreBOM: true }).decode(body);
+  } catch {
+    throw encodingError('文件不是完整有效的 ' + (encoding === 'utf8' ? 'UTF-8' : 'UTF-16') + ' 文本，已停止打开以保护原文件：' + file);
+  }
+  const crlf = (text.match(/\r\n/g) || []).length, lf = (text.match(/\n/g) || []).length - crlf;
+  const cr = (text.match(/\r/g) || []).length - crlf;
+  const eol = crlf > 0 && crlf >= lf && crlf >= cr ? '\r\n' : cr > lf ? '\r' : '\n';
+  return { text: text.replace(/\r\n?|\n/g, '\n'), bom, eol, encoding };
+}
+
+function encodeDocument(text, { bom = false, eol = '\n', encoding = 'utf8' } = {}) {
+  if (!['utf8', 'utf16le', 'utf16be'].includes(encoding)) throw encodingError('不支持的保存编码：' + encoding);
+  // Buffer.from silently repairs invalid UTF-8 strings but can emit invalid UTF-16.
+  // Refuse both, retaining the editor draft and previous disk bytes.
+  for (let i = 0; i < text.length; i++) {
+    const c = text.charCodeAt(i);
+    if (c >= 0xd800 && c <= 0xdbff) {
+      const next = text.charCodeAt(++i);
+      if (!(next >= 0xdc00 && next <= 0xdfff)) throw encodingError('文档包含不完整的 Unicode 字符，已停止保存。请删除该字符后重试或撤销最近输入。');
+    } else if (c >= 0xdc00 && c <= 0xdfff) throw encodingError('文档包含不完整的 Unicode 字符，已停止保存。请删除该字符后重试或撤销最近输入。');
+  }
+  const lineBreak = ['\n', '\r\n', '\r'].includes(eol) ? eol : '\n';
+  const value = (bom ? '\ufeff' : '') + text.replace(/\r\n?|\n/g, lineBreak);
+  const bytes = Buffer.from(value, encoding === 'utf8' ? 'utf8' : 'utf16le');
+  return encoding === 'utf16be' ? bytes.swap16() : bytes;
+}
+
+module.exports = { decodeDocument, encodeDocument };

package/host.json

@@ -0,0 +1,50 @@
+{
+  "source": "../MarkPilot-CM6/shell",
+  "files": [
+    {
+      "path": "document-store.js",
+      "bytes": 14019,
+      "sha256": "34bd34a40fef36499e36b0f50f8357a9290c1040dad8bbe8ff7da29405a30f20"
+    },
+    {
+      "path": "live-documents.js",
+      "bytes": 30336,
+      "sha256": "2f843e6a5e143a72c5f08092f8a09570a48b01c35d204d334fd88026917deaf3"
+    },
+    {
+      "path": "text-codec.js",
+      "bytes": 4308,
+      "sha256": "0640a34938bef9037b25bd941cf9569b2513c3cef2ed97f090fcb760084ea4ac"
+    },
+    {
+      "path": "safe-file.js",
+      "bytes": 8371,
+      "sha256": "d6878ec47d8670232171a130250340ba8ac4707baebe8f6b3c4ed9f8e9106915"
+    },
+    {
+      "path": "native-worker-lease.js",
+      "bytes": 8612,
+      "sha256": "b8dc6b7af75dd685130a26c250c45d17f72d01c523768783a4fa617604857b81"
+    },
+    {
+      "path": "native-worker-path.ps1",
+      "bytes": 4081,
+      "sha256": "0534a5a275cb20f4960feb2554d5b1ac6b383999a5fb60e3789df6ddd702411b"
+    },
+    {
+      "path": "native/file-worker.exe",
+      "bytes": 19968,
+      "sha256": "c6f1bf4e5a0335ff066eca2597b273a32e39d7fe9762c566b393ea01c542ce22"
+    },
+    {
+      "path": "native/file-worker.exe.build.json",
+      "bytes": 410,
+      "sha256": "88c38aa21f9ef494240e42c6ac55b82f6e2d4aff02404aa5824ee235cff39b6b"
+    },
+    {
+      "path": "package.json",
+      "bytes": 20,
+      "sha256": "dbf8353f77358bc12169b7bb7301e1978d5b503e002ee927229a8993672818fc"
+    }
+  ]
+}